Managing granular authorisation in .NET, with Ryan Rowston

Adelaide .NET User Group Podcast

A tartalmat a David Gardiner and Adelaide .NET User Group / David Gardiner biztosítja. Az összes podcast-tartalmat, beleértve az epizódokat, grafikákat és podcast-leírásokat, közvetlenül a David Gardiner and Adelaide .NET User Group / David Gardiner vagy a podcast platform partnere tölti fel és biztosítja. Ha úgy gondolja, hogy valaki az Ön engedélye nélkül használja fel a szerzői joggal védett művét, kövesse az itt leírt folyamatot https://hu.player.fm/legal.

2y ago 1:04:36

MP3•Epizód kép

We have a challenge: Modern day administrators want to keep a tight rein on who can perform different actions in their systems. Join us and learn how we've evolved our authorisation patterns to grant highly granular permissions to different users, while maintaining developer-friendly patterns in code.

In this talk I'll explain how we've approached this challenge, including:

How we've encoded discreet permission levels as bits in a 64-bit integer using a .NET flags enum.
How we've used an extended Authorize attribute to allow for developer to add authorisation in one line to API controllers/endpoints.
How we've enabled dynamic policy generation to account for the potentially quintillions of unique permission combinations that this enables.

Links:

Ryan on LinkedIn

68 epizódok

#Tech #Microsoft #User #Adelaide #Australia #Programming #Software #Development #Adelaide .NET User Group / David Gardiner #Podcasting Education #David Gardiner #NET #Group